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STORAGE AREA NETWORK MANAGEMENT SYSTEM, METHOD, AND 
COMPUTER-READABLE MEDIUM 

CROSS REFERENCE TO RELATED APPLICATIONS 

The contents of Japanese Patent Application No. 2000-167482, filed June 
5, 2000 in Japan, are incorporated herein by reference. 

BACKGROUND OF THE INVENTION 

1 . Field of the invention 

The present invention pertains to the management systems of storage 
area networks (hereafter referred to as SAN) that join several servers and 
several storage devices using fiber channel networks. 

2. Description of the Related Art 

In recent years, the capacity of single storage systems has mcreased and 
they now need to be able to function with several different types of servers. 
Also, with the advent of the widespread use of fiber channels, which can 
transfer data in parallel along data transfer routes at high speeds and among 
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several host computers, it is expected that the scale of the connection format of 
storage systems is going to become even larger in this environment. 

Joining several servers and several storage devices together in this way is 
referred to as a storage area network (hereafter referred to as a SAN) and 
attempts are being made to reduce the total cost of ownership (TCO) or manage 
the storage needs of several servers that are increasingly dispersed. 

Be that as it may, however, there are some problems that require solving 
in the areas of security and the management of regions on a storage device. 

One of these problems is that it is possible for data in one storage device 
that is being used by one host to be inadvertently destroyed by another host 
when a SAN is made up of several host computers (hereafter referred to as 
hosts) and several storage systems. This is because all of the hosts are capable 
of accessing all of the storage systems. 

At present there are no perfect solutions to the problems of managing 
regions m storage systems or security. Moreover, when there is a problem with 
one of the many devices making up a SAN, many different error reports are sent 
to the system administrator, making it difficult to pinpoint an affected area and 
resulting in no real method for doing so. 

Several terms used herein are well known in the art. More particularly, 
SAN (storage area network), FCA (fiber channel adapter), HBA (host bus 
adapter), WWN (world wide name), PID (port identification), and TCO (total 
cost of ownership) are terms which are well known in the art. 

SUMMARY OF THE INVENTION 

The present invention solves the above-mentioned problems. 

An object of the present invention is to integrate and manage the 
traditionally dispersed security system from a single source. 
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Another object of the present invention is to provide good security 
administration automatically in a storage area network (SAN). 

The present invention comprises a storage area network management 
system, method, and computer-readable medium storing a program executing 
processes. 

The storage area network management system, method, and computer- 
readable medium of the present invention comprise host computers, storage 
devices, switches, and an integrated management mechanism. Each of the host 
computers comprises a storage area network management mechanism. Each of 
the storage devices comprises a storage management mechanism. The switches 
are coupled to the host computers and to the storage devices. The switches 
interconnect the host computers and the storage devices. Each of the switches 
comprises a region-setting mechanism. The integrated management mechanism 
integrates and controls the storage area network. The integrated management 
mechanism includes access route information of the host computers and the 
storage devices and, based on the access route information, transmits access 
management information to the storage devices and the storage area network 
management mechanisms of the host computers, transmits region information to 
the region-setting mechanisms of the switches, and transmits access limit 
information concerning the host computers to the storage management 
mechanisms of the storage devices. 

Moreover, the storage area network management system, method, and 
computer-readable medium of the present invention comprises the integrated 
management mechanism detecting whether fiber channel adapters mounted on 
the storage devices and the host computers, the host bus adapters mounted on 
the host computers, or the switches in the storage area network management 
system are replaced, obtaining settings information following the replacement 
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from the storage area network management mechanism of the host computers, 
the switch region-setting mechanism, or the storage device storage management 
mechanism, and reconfiguring the access relationships to be equivalent to the 
access relationships prior to the replacement. 

In addition, the storage area network management system, method, and 
computer-readable medium of the present invention integrates problem reports 
from related problems into a single problem report. 

Further, the present invention comprises a method of a storage area 
network system comprising integrating and controlling the storage area network 
by an integrated management mechanism managing access relationships between 
host computers of the storage area network and storage devices of the storage 
area network. 

These together with other objects and advantages which will be 
subsequently apparent, reside in the details of construction and operation as 
more fully hereinafter described and claimed, reference being had to the 
accompanying drawings forming a part hereof, wherein like numerals refer to 
like parts throughout. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 is a schematic diagram of the present invention. 

Fig. 2 is a diagram showing a typical SAN system configuration suitable 
for the present invention. 

Fig. 3 is a diagram showing the configuration of the SAN management 
system of one embodiment of the present invention. 

Fig. 4 is a diagram showing a typical storage device hardware 
configuration. 

Fig. 5 is a diagram showing examples of access pass settings 
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information, a storage affinity table, a switch, a zoning table and a host affinity 
table. 

Fig. 6 is a flowchart showing the process performed by the SAN 
integrated management mechanism of the present invention. 

Fig. 7 is a flowchart showing the process performed by the zoning 
settings mechanism. 

Fig. 8 is a diagram describing a SAN problem management. 

Fig. 9 is a diagram showing a typical problem report method definition. 

Fig. 10 is a flowchart of the SAN problem monitormg function 
performed by the SAN integrated management mechanism. 

DESCRIPTION OF THE PREFERRED EMBODIMENTS 
Fig. 1 is a schematic diagram of a Storage Area Network Management 
system 100 of the present invention. As shown in Fig. 1, the Storage Area 
Network Management system 100 of the present invention installs in a SAN 
environment, an integrated management mechanism 1 of the present invention 
that integrates and controls the SAN so that all of the access relationships of the 
hosts 2 and the storage devices 4 are managed using the integrated management 
mechanism 1 . The system administrator sets up the regions on the storage 
device 4 side that are to access die integrated management mechanism 1 from 
the host 2 side as well as the fiber channel adapter (FCA) and host bus adapter 
(HBA) to be used when accessing that storage. These settings are referred to as 
the access paths. 

Based on the access path information that was set up, this integrated 
management mechanism 1 first establishes the storage settings (or Storage 
affinity) that is seen from the host 2 side by the SAN management mechanism 2a 
on the host 2 side. 
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Then, the system administrator establishes the zoning for the switch 3 
zoning setting mechanism 3a by securing the World Wide Name (WWN) and 
Port Identification (PID) information that the FCA and HBA have and then 
makes calculations that allow the access paths that were set up based on that 
information to be configured. Next, the settings are made in the storage 
management mechanism 4a of the storage device 4, to determine which FCA is 
to permit access to which HBA (WWN or PID) and to which regions. 

As above, installing the integrated management mechanism 1 makes it 
possible to conduct comprehensive security management and storage region 
management in a storage area network system. 

Also, by setting up the above integrated management mechanism 1 so 
that the integrated management mechanism 1 holds the SAN configuration status 
as the configuration setting information la, it is easy for the SAN to 
accommodate hosts that do not have SAN management functions or switches 
that do not have zoning devices, allowing for as much security as possible. 

Furthermore, by installing the aforementioned integrated management 
mechanism 1 the following functions become possible: 

(1) Integrated management mechanism 1 secures the SAN 
configuration status from individual devices and stores that as configuration 
settings information la. Then, either at regular intervals or when given a 
command by a system administrator, the integrated management mechanism 1 
reads in the current SAN configuration status and compares that with the SAN 
configuration settings information la. If they differ, the integrated management 
mechanism 1 determines that there is a problem and notifies the system 
administrator. This makes it easy for system administrators to be able to learn 
about SAN problems. 

(2) When given the command from the system administrator, the 
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integrated management mechanism 1 secures access relationships information 
from the SAN management mechanism 2a, the zoning settings mechanism 3a 
and the storage management mechanism 4a, and checks the compatibility of the 
access paths. If the access paths are not set up correctly, the integrated 
management mechanism 1 notifies the system administrator as to where the 
problem is. This makes it possible for the system administrator to verify the 
compatibility of the access paths. 

(3) When the host 2, the host 2 HBA, the switch 3 or the FCA of the 
storage device 3 are replaced, the aforementioned mtegrated management 
mechanism 1 detects this, obtains the settings information after the replacement 
from the host 2 SAN management mechanism 2a, the switch 3 zoning settings 
mechanism 3a, or the storage management mechanism 4a of the storage device 
4, and reconfigures the access relationships so that they will be equivalent to 
those prior to the replacement. This makes it possible to respond easily to 
modifications in the SAN configuration easily. 

(4) When the access paths are not set up when the system is first 
brought up, the settings to switch 3 are configured such that no access is 
allowed. This makes it possible to avoid settings which allow accidental access 
when the system is first started up and no access paths have been set up. 

(5) In the fiber channels, there are fiber channel transfer class 
parameters for which the HBA and FCA sides are to be set up with shared 
settings. If these parameters are different on the HBA side and FCA side, 
transfers will be impossible. 

For this reason, when setting up the aforementioned access paths, the 
transfer class to use is specified by the system administrator and, through the 
SAN management mechanism 2a, the storage management mechanism 4a, the 
integrated management mechanism 1 is set up so that the access paths set by the 
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HBA and the FCA operate using the same transfer classes. This allows the 
elimination of the problem of being unable to transfer data when the transfer 
classes differ. 

(6) When a problem occurs inside the SAN, first, the integrated 
management mechanism 1 receives a report of that problem and temporarily 
stops sending reports to the system administrator. It then waits for a specific 
period of time to see if there have been any reports from any of the other 
devices managed by the integrated management mechanism 1 . It checks the 
content of any reports received during this waiting period against the WWN, 
PID and access path information of each adapter that the integrated management 
mechanism 1 holds and checks for a possible relationship to the problem 
reported first. If it is determined that there is a relationship, only one problem 
is reported to the system administrator. Based on this information, the system 
administrator can determine immediately the problem area. 

(7) It doesn't just report on one affected area. Even reports where 
the affected area has been judged to be unrelated in a report may be reported as 
a related problem. This makes it possible for the system administrator to 
determine the scope of the effect. 

(8) The integrated management mechanism 1 secures not only 
settings information for each of the access paths in advance, it also secures 
logical volume information on the host 2 side that is used on each access path as 
well as information from the SAN management mechanism 2a on the host 2 side 
and stores it as the configuration settings information la of the integrated 
management mechanism 1. When a problem is reported in the SAN, the 
integrated management mechanism 1 reads in the configuration settings 
information la in the integrated management mechanism 1 for the access path 
using the affected spot and reads the host logical volume using that access path 
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and reports the logical volumes affected by the trouble to the system 
administrator. Once the logical volume affected by the problem is known, the 
recovery of that logical volume can be started immediately and the effect on 
business operations can be kept to a minimum. 

Embodiments of the Present Invention 

Fig. 2 shows an example of a SAN system configuration 200 that could 
be used with the present invention discussed with reference to Fig. 1. As shown 
in Fig. 2, the LAN (local area network) 210 in which many host computers 
(hereafter referred to as hosts) HI - Hn , management servers S which 
function as SAN comprehensive management devices (discussed below), the 
aforementioned switches SWl - SWm , the storage devices ST, and the 
magnetic tape devices MT are connected. 

The SAN 220 (storage area network) is equipped with the hosts HI - 
Hn, the switches SW, the storage devices ST, the magnetic tape devices MT and 
other devices. There are data paths among the various hosts HI - Hn, the 
switches SWl - SWm, the storage devices ST and the magnetic tape devices 
MT. Access between the hosts HI — Hn to the storage devices ST and other 
devices has priority over the data paths. The information showing the 
configuration status of the SAN 220 is also transferred by the storage device ST 
over the LAN to the management server S and all of the settings information 
that comes from the management server S is transferred to the host computers 
HI - Hn , the switches SW and the storage devices ST. 

Fig. 3 is a diagram showing the configuration of the storage area 
network (SAN) 200 of the embodiment of the present invention. Here, as an 
example, the SAN 200 includes the hosts 110 and 120, the switch 300 and the 
storage devices 410 and 420. 
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In Fig. 3, the hosts 110 and 120 are connected to the switches 300 by the 
fiber channel 303, 304 through the host bus adapters (hereafter referred to as 
HBA) 111, 112 and 121. The storage devices 410 and 420 are also connected to 
the switches 300 by the fiber channel adapters (hereafter referred to as FCA) 
411,412 and 421. 

Fig. 4 shows an example of a hardware configuration of a storage device 
430 corresponding to one of the storage devices 410, 420 shown in Fig. 3. In 
the storage device 430 shown in subsystem control module 1 1 is connected to 
upper devices 130, 132 (such as host devices 110, 120) through channel I/F 
modules 134, 136. The subsystem control module 11 includes a memory Ua, 
an MPU lib and a bus interface module 11c. The aforementioned MPU lib 
runs programs stored in the memory 11a. In addition to programs, transfer data 
and control data are also stored in the memory 11a. 

Device control module 13 includes buffer 13a, MPU 13b and memory 
13c. Memory 13c stores programs that run on the aforementioned MPU 13b 
and bus interface module 13d. 

The aforementioned subsystem control module 1 1 and the device control 
module 13 are connected to each other through the bus 138. The device control 
module 13 is connected to the disk drive group 15 through the device I/F 
module 14. 

In the SAN environment described above, the management mechanism 
500 (corresponding to the management server S in Fig. 2, mentioned above, 
which includes this function) which integrates and controls the SAN, was 
installed in this embodiment as shown in Fig. 3. The embodiment of SAN 220 
is set up so that the management mechanism 500 can manage the access 
relationships between the hosts 110 and 120 and the storage devices 410 and 
420, as shown in Fig. 3. 
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The SAN management mechanisms 118 and 128 are also installed on the 
hosts 110 and 120 and the storage management mechanisms 418 and 428 are 
installed on the storage devices 410 and 420 in order to respond to control from 
the management mechanism 500. 

As described above, the SAN management mechanisms are mechanisms 
that set up the storage affinity; also as described above, the storage management 
mechanisms are mechanisms that set up the host affmity. The switch zoning 
settings mechanism 301 is installed on the switch 300 

The system administrator sets up the region on the storage side that 
attempts to access the SAN integrated management mechanism 500 from the 
host side and the FCA (fiber channel adapter) and the HBA (host bus adapter) 
that are used when accessing that storage. These settings are referred to as the 
access path settings. 

In this SAN integrated management mechanism 500, the access path 
information that has been set up is stored as access path settings information 600 
in the SAN integrated management mechanism 500 shown in Fig. 5 (a). Using 
this settings information, the storage settings (Storage affinity) that can be seen 
from the host side are set up on the SAN management mechanisms 118 and 128 
on the host side. That is, they are set up to determine which FCA (WWN or 
PID) can be accessed from which HAB. 

The settings specifying which FCA can be accessed from which HBA are 
organized by creating a management table in the host like the storage affinity 
602 shown in Fig. 5 (b) and specifying the FCA to be accessed. In this 
example, the settings allow access to region 415 in the FCA of WWN c from 
HBA 111. The command on the fiber channel can be run through the WWN of 
the destination FCA. 

The WWN and PID information held by the FCA and HBA is secured in 
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advance in response to the zoning settings mechanisms 301 of the switches 300. 
Calculations are made so that the access paths originally set up are configured 
and the zoning is set up. Fig. 5 (c) shows an example of a switch zoning table 
604. 

The zones here are set up using A and B and the identifier (here WWN) 
of the ports (HBA or FCA) that permits mutual access is stored in the respective 
zones. In this way, Zone A is recognized for access from the switch WWN a 
and an access restriction which only allows operations to be run on WWN c is 
put in place. 

In the fiber channel environment, when the switches 300 and the ports 
are connected, a log-in sequence begins and the switch is able to secure WWN 
information as part of that log-in sequence. When commands are issued from 
the hosts 110 and 120 to the storage devices 410 and 420 using this information, 
if the access of a port that has not been specified for the zone is designated, the 
system control prevents the command from reaching the storage devices 410 and 
420. 

Next, the access settings are set up to determme which regions will be 
permitted access to the storage management mechanisms 418 and 428 of the 
storage devices 410 and 420 from which HBA or PID of the storage devices 410 
and 420. Fig. 5 (d) shows a sample host affmity table 606. 

Based on this table 606, only access from the HBA of the WWN a will 
be allowed to region 415 for FCA 411 and only access from the HBA of the 
WWN e will be allowed to region 416 for FCA 412. 

In a fiber channel environment, there is a log in sequence in which 
mutual port information is exchanged before accepting a command from a host. 
The WWN, PID and other destination information are verified during that 
sequence. 
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Here, the FCA determines whether or not access is permitted of the 
destination information of the WWN or PID that has been secured. The 
processing will continue only for devices permitted access. Access attempts by 
those without permission will result in check condition or other error responses. 

There are some devices that have no SAN management mechanism 
among the host devices making up the SAN. There are also devices which do 
not provide the aforementioned host affmity function even inside the storage 
device. For this reason, the management mechanism 500 would not designate 
the access relationships for this sort of device, but the security would be assured 
by other security systems (such as Storage affmity or zoning). 

Fig. 6 is a flowchart 650 showing a specific example of the operation of 
the SAN integrated management mechanism 500. The processes shown in Fig. 
6 are stored on a computer-readable medium storing an integrated management 
program which, when executed by a computer, causes the computer to execute 
the processes shown in Fig. 6. 

First, the SAN integrated management mechanism 500 reads in the FCA, 
the WWN of the HBA and the PID (Process 652). In the example in Fig. 3, the 
SAN integrated management mechanism 500 would recognize that the HBA 1 1 1 
of the host 110 was WWN a and PID a, that the FCA 411 of the storage device 
410 was WWN c, PID c and the FCA 412 was WWN d and PID d. 

Next, the SAN integrated management mechanism 500 would accept the 
FCA scheduled for access from the HBA and its subordinate regions (Process 
654). In the example in Fig. 3, it would accept the path settings for access to 
the region 415 through the FCA 411 of the storage device 410 from the HBA 
111 of the host 110. 

Next, the host in question would check to see if the storage affmity 
function were supported or not (Process 656). If the storage affmity function is 
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not supported, control would pass to Process 660. If the storage affinity 
function is supported then in Process 650, the storage affinity function would 
allow the SAN integrated management mechanism 500 to use the PID or the ^ 
WWN to set up the devices (Process 658) that can access the host side SAN 
management mechanism from the HBA. 

For example, in the example in Fig. 3, the SAN management mechanism 
118 is set up so that it can access the WWN c or the PID c that are the 
identifiers of the FCA 411 of the storage device 410 from the HBA 111 of the 
host 110. 

Next, it will check to see if the switch supports the zoning function 
(Process 660). If the zoning function is not supported, it will go on to Process 
664. If the zoning function is supported, the zoning settings mechanism of the 
switch establishes the zoning function to use WWN or PID in Process 662. 

In the example in Fig. 3, for instance, the access to the FCA 411 of the 
storage device 410 from the HBA 1 1 1 of the host 1 10 would be either the WWN 
a - WWN c zoning settings or the PID a - PID c zoning settings. One of 
those would be set to the zoning settings function 301 of the switch 300. 

Next, there is a check to determines whether the storage device supports 
the host affinity function (Process 664). If the host affmity function is not 
supported, the process ends. If the host affinity function is supported, then, in 
Process 666, the host affmity function is used to set up the relationships between 
the region and the PID or the WWN of the host-side HBA that is permitted 
access from the FCA. 

For example, the example in Fig. 3 is set up so that commands from the 
PID a or the WWN a of the host 1 10 HBA 1 1 1 are accepted by the FCA 41 1 of 
the storage device 410. Also, the storage management mechanism 418 of the 
storage device 410 is set up so that it can access the region 415 in response to 
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commands from either the WWN a or the PID a. 

Next, the flowchart 700 in Fig. 7 describes operations performed by the 
zoning settings mechanism 301 in the switches 300. 

First, the zoning settings mechanism 301 is set to a state without zoning 
settings (a mode which permits conmiunications among all ports) (Process 702). 
That is, the standard is that no zones are set and that all access is permitted. 

Next, the zoning settings mechanisin 301 accepts a non-permission 
setting for conmiunications among all ports from the SAN integrated 
management mechanism 500 (Process 704), which sets it up so that 
communications among no ports is permitted (Process 706). By setting it up in 
this way so that no communication is permitted among ports, the problem of 
accidental access when the system is started up and no access paths have been 
specified can be avoided. 

Next, the zone settings (the PID groups or the AVWN groups, making up 
the zone) are accepted from the SAN integrated management mechanism 500 
(Process 708). These zone settings are made, for example, by the system 
administrator through the SAN integrated management mechanism 500. 

New zone settings are made for the zoning settings mechanism 301 using 
the WWN groups or PID groups accepted above (Process 710). 

Next, the switches 300 secure the WWN of the destination ports 
connected to each of the ports (Process 712). Note that the PID is determined 
by the position of the physical port of the switches 300. 

Here, when the command is issued from the host port WWN x to the 
destination port WWN y, the switch 300 accepts the aforementioned command 
(WWN X WWN y) (Process 714). Then, the zoning settings mechanism 301 
checks to see if WWN x and WWN y are set for the same zone (Process 716). 
If they are set for the same zone, the command passes from the host port to the 
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destination port. That is, the destination port is made recognizable using the 
name server function of the switch 300 (Process 718). And, if the settings are 
not for the same zone, the command is not allowed to pass. That is, the 
destination port recognition is deleted using the name server function of the 
switch 300 (Process 720). 

Next, the fundamentals of the host input/output process (I/O operations) 
in the SAN environment described above are described. 

The following is a description (using Fig. 3 mentioned above) of a 
typical process in which an I/O operation issued from the host 1 10 and 120. 
Note that this description concerns the I/O to the storage devices 410 from the 
host 110 through the HBA 111, the switch 300 and die FCA 411. 

First, from the storage affinity table shown in Fig. 5 (b) mentioned 
above, the host 110 recognizes that the region 415 access requires accessing the 
FCA with a WWN c through the HBA 111. 

Based on this information, the host 110 issues a fiber channel frame to 
the HBA 1 1 1 switch 300 as the I/O for WWN c. 

The I/O fiber channel frame is secured for the WWN c accepted from the 
HBA 1 1 1 of the switch 300 and access is permitted because the WWN c and 
WWN a of the HBA 1 1 1 are in the same zone on the switch zoning table shown 
in Fig. 5 (c) mentioned above. The fiber channel frame is transferred to the 
FCA 411 that is specified by the WWN c value. 

The fiber channel frame received from the FCA 41 1 is recognized as 
having come from WWN a which is designated in the host affinity table in Fig. 
5 (d) mentioned above, so it determines that it can process this and runs the I/O. 

The following is a description of the functions of the SAN integrated 
management mechanism 500 above. 

(1) Detection of System Problems by Comparing the SAN Configuration 

16 



Atty. Docket No. 2L1993/GMG 



Settings Information 

As stated above, the SAN integrated management mechanism 500 
secures SAN configuration information from each of the devices and stores that 
in the SAN configuration settings information 501. 

The SAN integrated management mechanism 500 also reads in the 
current SAN configuration information at regular intervals or when instructed 
by a system administrator, compares that with the SAN configuration settings 
information 501 and notifies the system administrator if it determines that there 
has been a problem. For example, in the state in Fig 3 above, the SAN 
configuration settings information 501 was registered and then the storage 
device 420 power supply went out. The SAN determines that there was a 
problem with the configuration and reported to the system administrator that the 
storage device 420 could no longer be seen. 

(2) Access Path Match Verification 

When given a command by the system administrator, the SAN integrated 
management mechanism 500 secures the access relationships information from 
the SAN management mechanisms 118 and 128, the zoning settings mechanism 
301, the storage management mechanism 418 and 428 and verifies that the 
access path(s) match. 

If the access paths are not set up correctly, the system administrator will 
be notified of a problem in that section. This function makes checking for 
problems possible if a system administrator has gone and changed the settings 
On individual equipment. 

Also, if the SAN is already in a state where the access paths have already 
been set up, when the SAN management logic is incorporated anew, the existing 
SAN access paths can be checked to see if they are set up correctly. 

(3) Reconfiguring the Access Relationship Settings for HBA Replacement 
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When the HBA 1 1 1 on the host 1 10 side fails and is replaced with a new 
HBA, the SAN management mechanism 118 detects the HBA replacement and 
notifies the system administrator. Using the new configuration settings 
command from the system administrator, the SAN management mechanism 118 
reports that a new HBA WWN was replaced in the SAN integrated management 
mechanism 500. 

The SAN integrated management mechanism 500 uses the new WWN to 
re-establish access relationships that are equivalent to those prior to the HBA 
replacement. It then sets up the access relationships once more in two 
mechanisms that set up access relationships (Zoning settings mechanism 301 and 
the storage management mechanism 418). 

(4) Reconfiguring the Access Relationship Settings for Host Replacement 
When the host 110 fails and is replaced with a new host, the SAN 

management mechanism 118 on the host 110 detects that the settings are gone 
and notifies the system administrator. Using the new configuration settings 
command from the system administrator, the SAN management mechanism 118 
reports that a new HBA WWN has been connected to the SAN integrated 
management mechanism 500 and the SAN integrated management mechanism 
500 uses that WWN to establish access relationships that are equivalent to those 
prior to the HBA replacement. It then sets up the access relationships once 
more in two mechanisms that set up access relationships (Zoning settings 
mechanism 301 and the storage management mechanism 418). 

(5) Reconfiguring the Access Relationship Settings for Switch Replacement 
When the switch 300 fails and is replaced, the system detects that the 

zoning information that was set in the switch is missing and notifies the system 
administrator. 

A reconfigure settings command from the system administrator 
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establishes a mechanism in the SAN integrated management mechanism 500 that 
will set the access relationships for the new switch to those prior to the failure. 
In this case, the access relationships in the new switch will be reset by the SAN 
integrated management mechanism 500 to those prior to the failure. 

Note that when the switch 300 fails and is replaced, the absence of 
zoning information that was set up for the switch will be detected, but the 
system can be configured so that instead of sending a notice out to the system 
administrator, a mechanism can be built into the SAN integrated management 
mechanism 500 that automatically sets up the access relationships in the new 
switch to those prior to the failure from the SAN integrated management 
mechanism 500. 

(6) Reconfiguring the Access Relationship Settmgs for FCA Replacement 
When the storage device-side 410 FCA 411 fails and the FCA-side 

WWN are replaced, the system detects this and reports it to the system 
administrator. 

Based on a command from the system admmistrator to reconfigure the 
settings, the storage management mechanism 418 detects a new FCA WWN and 
reports this to the SAN integrated management mechanism 500. The SAN 
integrated management mechanism 500 uses that new WWN to re-establish 
access relationships that are equivalent to those prior to the FCA replacement. 
It then sets up the access relationships once again in two mechanisms that set up 
access relationships (the SAN management mechanism 118 and zoning settings 
mechanism 301). 

(7) Prevention of Accidental Access Settings 

As stated above, in order to avoid settings that allow accidental access 
before the access paths have been set up when the system is started up, the 
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switches are set up so that they are not permitted any access when the system is 
brought up without the access path settings. 

Without such settings, all of the hosts would be able to access all of the 
SAN storage and that could cause problems of security. 
(8) Setting up the Fiber Channel Transfer Classes 

Fiber Channels (FC) have parameters referred to as FC transfer classes 
for which the settings should be shared on the HBA and FCA sides. The 
transfer classes in this system range from 1-3, and transfer class 1 is used 
sparingly. Transfer class 2 returns an acknowledge following the transfer and 
transfer class 3 does not return an acknowledge following the transfer. If these 
parameters on the HBA and FCA sides are different, transfers cannot take place. 

That is why when setting up the access paths discussed above, the classes 
to be used are specified by the system administrator and the management 
mechanism 500 is set up to run on the same classes specified for the access 
paths specified for the HBA and FCA throughout the management mechanisms 
118 and 128 and the storage management mechanisms 418 and 428. 

The following is a description of the aforementioned SAN trouble 
monitor using the SAN integrated management mechanism 500. 

The method used is basically that when using the SAN integrated 
management mechanism 500, when there are problems with the devices making 
up the SAN (hosts, switches and storage devices), the SAN integrated 
management mechanism 500 receives all reports of device problems from the 
device side and reports them to the system administrator. 

However, as shown in Fig. 8, when there is a problem with FCA 411, 
not only does the storage device 410 send a report to SAN integrated 
management mechanism 500 that the FCA 411 has failed, the switch 300 sends 
out a report that either the FCA 411 or the switch port connected to the FCA 
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411 has malfunctioned and a report that the access paths from the host 110 side 
and from the HBA 1 1 1 cannot be used. 

It follows that a method is needed for compiling the problem reports 
from these three places into one report for the system administrator. This 
method is described below. 

When there is a problem in the SAN, first the SAN integrated 
management mechanism 500 receives a report of that problem and then stops 
reports to the system administrator for a time. That is, the SAN integrated 
management mechanism 500 waits for a specific period of time (for example, 
one minute) to see if any other problems are reported from other devices that the 
SAN integrated management mechanism 500 manages. 

While the SAN integrated management mechanism 500 is waiting, the 
SAN integrated management mechanism 500 reviews the content of the problem 
report that the SAN integrated management mechanism 500 received and the 
SAN integrated management mechanism 500 starts checking the WWN, PID or 
the aforementioned access path mformation held in the SAN integrated 
management mechanism 500 for each of the adapters to see if there might be 
something related to the first problem received. 

If a related problem is found after the check, it follows the problem 
report method definition 800 shown in Fig. 9 that is set up in advance in the 
SAN integrated management mechanism 500 and reports just one problem to the 
system administrator. Using this information, the system administrator can 
determine where the affected point is immediately 

Fig. 9 shows an example of the problem report method definition 800. 
Fig. 9, the column on the left shows the problem information that the SAN 
integrated management mechanism 500 received and the column on the right 
shows the content of the problem report made up by the SAN integrated 
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management mechanism 500. 

For instance, if the SAN integrated management mechanism 500 receives 
the following problem reports: FCA error, switch port access error and host- 
side access error, the SAN integrated management mechanism 500 will judge it 
to be an FCA error and send out a problem report. 

The following is a description of the SAN problem-monitoring function 
of the SAN integrated management mechanism 500 and an example of the FCA 
411 problem report method based on the flowchart 1000 in Fig. 10. 

First the SAN integrated management mechanism 500 receives a problem 
report (Process 1002). If, for example, the problem took place in the FCA 411, 
the SAN integrated management mechanism 500 would receive an FCA 411 
problem report from the storage device 410. 

Based on this, the SAN integrated management mechanism 500 would 
wait for a specific period of time to see if there were problem reports from other 
devices (Process 1004). 

If the SAN integrated management mechanism 500 receives a problem 
report from the switch side (Process 1006), the SAN integrated management 
mechanism 500 would compare the content of the new problem report against 
the earlier problem report based on related information from the WWNs and 
other devices (Process 1008). For example, if the SAN integrated management 
mechanism 500 received a report that there were path errors with the WWN c 
and PID c from the switch 300, the SAN integrated management mechanism 500 
would recognize that they were the same error because the WWN c and PID c 
are part of the FCA 411. 

Next, when a problem report is received from the host side (Process 
1010), the content of the new problem report is compared against the content of 
the earlier problem report based on related information from the WWN and 
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other devices (Process 1012). If, for example, a report about a WWN a and 
PID a path error is received from the host 110, the SAN integrated management 
mechanism 500 is aware that the WWN a and PID a as well as the WWN c and 
the PID c are linked to the access path 600, so they will be recognized as the 
same problem. 

After the aforementioned wait for a specific amount of time (Process 
1014), the related information is compared and the fimdamental cause of the 
problem is determined (Process 1016). This determination of the fundamental 
cause is performed using the aforementioned problem report definition contained 
in the SAN integrated management mechanism 500. For example, based on the 
aforementioned problem report definition, a problem on the host side and a 
problem on the Switch 300 side would be judged to be an FCA problem on the 
storage side. 

Only the fundamental cause is reported to the system administrator once 
it has been determined (Process 1018). For example, for the aforementioned 
problem with the FCA 411, only the FCA 41 1 problem would be reported to the 
system administrator. 

In the foregoing description, only the affected area was reported, but the 
system could be set up so that reports on problems that were not judged to have 
been related may also be reported with the related problems. In this way, the 
scope of the effect of the problem can be determined by the system 
administrator. 

If the SAN integrated management mechanism 500 also secures the host- 
side logical volume information used in the access paths from the SAN 
management mechanism 118 in addition to the settings information for each 
access path and stores that in the SAN configuration Settings information 501, 
the SAN integrated management mechanism 500 reports which logical volumes 
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have been affected by the problem and report that to the system administrator. 
That is, if problems are reported from inside the SAN 220, the access 
paths using the affected point are read in by the SAN integrated management 
mechanism 500 from the SAN configuration settings information 501 in the 
SAN integrated management mechanism 500. Furthermore, the host logical 
volumes using the access paths are also read in and the affected host logical 
volumes are reported to the system administrator as well. For example, for a 
problem with the FCA 411, region 415 would become unusable. 

If the system administrator can figure out the logical volumes affected by 
the problem, the recovery of those logical volumes would be possible 
inmiediately, keeping the effect on business operations to a minimum. 

A storage area network system of the present invention includes several 
computers and several storage devices forming a storage area network connected 
by switches. The aforementioned storage area network is equipped with an 
integrated management device that integrates and manages said storage area 
network. In addition to being equipped with access path information of the host 
computers and storage devices, the integrated management device also sends out 
access management information to the storage area network management 
mechanism of the host computers and to the storage devices, region information 
to the region setting mechanisms of the switches, and access restriction 
information concerning the aforementioned host computer to the storage 
management mechanisms of the storage devices. When the fiber channel 
adapters which are mounted on the storage devices, the host computer, the host 
bus adapters which are mounted on the host computers or the switches in said 
storage area network management system are replaced, the aforementioned 
integrated management mechanism detects this, obtains the settings information 
following the replacement from the storage area network management 
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mechanism of the host computers, the switch region-setting mechanism or the 
storage device storage management mechanism and reconfigures the access 
relationships so that they are equivalent to those prior to the replacement. 

In addition, in the storage area network system of the present invention, 
when the host bus adapter of the host computer fails and is replaced, the 
integrated management mechanism detects the replacement of the host bus 
adapter and notifies the system administrator. The system administrator issues a 
reconfigure command and the integrated management mechanism passes along 
the settings information fi"om the new, replacement host bus adapter in the 
storage area network management mechanism of the host computer. Using the 
new settings information, it configures the access relationships to be equivalent 
to those prior to the replacement of the host bus adapter and reconfigures the 
access relationships of the storage area network management mechanism, the 
region-setting mechanism and the storage management mechanism. 

Moreover, in the storage area network system of the present invention, 
when the host computer fails and is replaced, the integrated management 
mechanism detects that the storage area network management mechanism of the 
host computer has no settings and notifies the system administrator. The system 
administrator issues a reconfigure command, which passes along to the 
integrated management mechanism the settings information of the connected 
host bus adapter. The integrated management mechanism uses that information 
to reconfigure the access relationships to be equivalent to those prior to the host 
computer replacement and then sets up the access relationships of the region- 
setting mechanism and the storage management mechanism once again. 

Also in the storage area network system of the present invention, when a 
switch fails and is replaced, the integrated management mechanism detects that 
the region settings information that was set up in the switch is not present and 
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notifies the system administrator. The system administrator issues a reconfigure 
command, which sets the access relationships prior to the replacement in the 
new switch and can reconfigure the access relationships. 

Further in the storage area network system of the present invention, 
when a switch fails and is replaced, the integrated management mechanism 
detects that the region settings information that was set up in the switch is not 
present and the integrated management mechanism automatically sets up the 
access relationships prior to the failure in the new switch and then reconfigures 
the access relationships. 

In addition in the storage area network system of the present invention, 
when the storage device side fiber channel adapter is replaced and the fiber 
channel adapter settings information is changed, the integrated management 
mechanism detects this and notifies the system administrator. The system 
administrator issues a reconfigure command and the storage management 
mechanism passes along the new settings information to the integrated 
management mechanism. The integrated management mechanism uses that new 
settings information to reconfigure the access relationships so that they are 
equivalent to those prior to the replacement and then configures once again the 
access relationships of the storage area network management mechanism and the 
region management mechanism. 

Also, a storage area network system of the present invention includes 
several host computers and several storage devices connected by switches and is 
equipped with an integrated management mechanism that integrates and controls 
the above storage area network. The integrated management mechanism is 
equipped with the access path information of the host computers and storage 
devices and using said access path information, the integrated management 
mechanism sends out access management information to the storage devices and 
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to the storage area network management mechanism, and the integrated 
management mechanism sends out region information to the switch region- 
setting mechanisms and sends out access restriction information concerning the 
aforementioned host computers to the storage management mechanisms of the 
storage devices. In this storage area network management system, when the 
system is started up and the access path information has not been set up, the 
aforementioned integrated management mechanism first sets up the region- 
setting mechanisms of the switches so that no access is permitted and after that, 
the integrated management mechanism sets up the regions on the regions 
settings mechanisms of the switches. 

Further, a storage area network system of the present invention includes 
several host computers and several storage devices connected by switches and is 
equipped with an integrated management mechanism that integrates and control 
the above storage area network. The integrated management mechanism is 
equipped with the access path information of the host computers and storage 
devices and, using the access path information, the integrated management 
mechanism sends out access management information to the storage devices, 
region information to the switch region-setting mechanisms, and access 
restriction information concerning the above host computers to the storage 
management mechanisms of the storage devices. In this storage area network 
management system, the above integrated management mechanism sets up the 
specified fiber channel transfer classes using the storage area network 
management mechanism of the host computers whose access information has 
been set up, and the storage management mechanism of the storage devices. 
This makes die host bus adapters of the host computers and the fiber channel 
adapters of the storage devices operate using the same transfer class. 

Moreover, a storage area network system of the present invention 
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includes several host computers and several storage devices connected by means 
of switches and is equipped with an integrated management mechanism that 
integrates and control the above storage area network. The integrated 
management mechanism is equipped with the access path information of the host 
computers and storage devices and, using said access path information, the 
integrated management mechanism sends out access management information to 
the storage devices and the storage area network management mechanisms, 
region information to the switch region-setting mechanisms, and access 
restriction information concerning the above host computers to the storage 
management mechanisms of the storage devices. In this storage area network 
management system, when a problem occurs in the storage area network system 
the above integrated management mechanism receives problem information and, 
for a specified period of time, the integrated management mechanism waits to 
see if there are other problem reports. The integrated management mechanism 
checks the problem reports received during that period and investigates the 
relationship between them and the problem report received first. If the 
integrated management mechanism judges that they are related, the integrated 
management mechanism sends out a single report concerning just one affected 
area according to a problem report method defmition set up in advance in the 
aforementioned integrated management mechanism. 

In addition, the storage area network system of the present invention 
presents the related problem reports that it receives as related problems in 
addition to the single problem area. 

Further, in the storage area network system of the present invention, in 
addition to the settings information for the access paths, the above integrated 
management mechanism also obtains and holds host-side logical volume 
information used in the access paths from the host computer storage area 
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network management mechanism. When there is a report of a problem from 
within the storage area network, said access paths are used to read in the logical 
volume based on the access path information using said problem area, and 
report on the logical volumes that are affected by the problem. 

Effects of the Present Invention 

As described above, in the present invention, the SAN is equipped with 
an integrated management mechanism that integrates and controls storage area 
networks and the integrated management mechanism above keeps track of all of 
the access relationships between the hosts and storage devices making the 
following effects possible. 

(1) It is possible to configure a highly reliable SAN system that is 
administered from one place. It is also compatible with past systems that lack 
host affinity, zoning or other functions, so it is not necessary to purchase an 
entirely new system in order to provide an operating environment for 
configuring a SAN. 

(2) It is possible to check problems with SAN and the compatibility of 
access paths easily. 

(3) The hosts, HAB , switches, storage devices, FCA and other components 
making up the SAN may be replaced or the SAN configuration may be changed 
and easily accommodated. 

(4) If there is a problem with the SAN, the affect area and the scope of its 
effect can be determined easily, so the effect on business operations can be kept 
to a minimum. 

The many features and advantages of the invention are apparent from the 
detailed specification and, thus, it is intended by the appended claims to cover 
all such features and advantages of the invention which fall within the true spirit 
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and scope of the invention. Further, since numerous modifications and changes 
will readily occur to those skilled in the art, it is not desired to limit the 
invention to the exact construction and operation illustrated and described, and 
accordingly all suitable modifications and equivalents may be resorted to, falling 
within the scope of the invention. 
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Element Number List 

1 Integrated Management Mechanism 
la Configuration Settings Information 

2 Host 

5 2a SAN Management Mechanism 

3 Switch 

3a Zoning Settings Mechanism 

4 Storage Device 

4a Storage Management Mechanism 

IP, 14 Device I/F Module 

100 Storage Area Network Management System 

Sj 110, 120 Host 

|j 111,112 Host Bus Adapter (HBA) 

j: 121 Host Bus Adapter (HBA) 

16 130 Upper Device 

fU 132 Upper Device 

^ 134, 136 Channel I/F Module 

P 138 Bus 

200 Storage Area Network System Configuration 

20 210 Local Area Network 

220 Storage Area Network 

300 Switch 

301 Zoning Settings Information 
303, 304 Fiber Channels 

25 410, 420 Storage Device 

4 1 1 , 42 1 Fiber Channel Adapter (FC A) 

412 Fiber Channel Adapter (FCA) 
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Storage Management Mechanism 

SAN Integrated Management Mechanism 

SAN Configuration Settings Information 
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